the new controlchan (+gpgverify)

[greg andruk]

In nnfolder+Mail:inn-workers, Russ Allbery <rra at stanford.edu> wrote:

>> It doesn't want to require a file before the path has been sanitized.  

> ...I don't understand the reason for this.  require has nothing to do with
> the path.

Sorry, I explained that poorly.  It's the `open F, ...' in the
convoluted eval substitute that elicits the insecure $ENV{PATH}
screaming, and I'm not sure if it's a good idea for innshellvars to be
mucking with the path behind the back of the calling script to get
around it.